Is Tezos vulnerable to overflow/ underflow attacks on the smart contracts? If yes, how do you recommend to test whether a particular smart contract suffers from it.
If you have two amounts (
t1 - t2 underflows when
t2 is bigger than
There is a similar overflow on
mutez (they are 64 bits values).
Shifts are also problematic (
LSR in Michelson).
When such an event happens, an exception is raised and that cancels the whole transaction.
Testing is not easy. For these cases, I personally think that they are a very good use case for automatic static analysis.